How to configure VLAN VPN on L2 Managed switches using the new GUI?

VLAN VPN (Virtual Private Network), also known as QinQ, is a simple and flexible layer 2 tunneling technology. VLAN VPN enables the packets sent from the private network to be forwarded through the ISP network with double VLAN tags.

With VLAN VPN enabled, when forwarding packets from the private VLAN to the ISP VLAN, the switch adds an outer VLAN tag (VLAN tag of the ISP VLAN) to the packets. Thus, packets can be transmitted through the ISP network with double VLAN tags. In the ISP network, packets are forwarded according to the outer VLAN tag, while the inner VLAN tag is treated as part of the payload. When the packets get to the peer private network, the switch removes the outer VLAN tag of the packets and then forwards the packets to the corresponding VLAN according to the inner VLAN tag.

Here is a configuration example for VLAN VPN.

A company has two stations, and the computers belong to VLAN 100 and VLAN 200 respectively. The ISP VLAN is VLAN 1050 and VLAN 1060, and the TPID adopted by the ISP network is 0x9100.

The two stations need to communicate with each other through the ISP network. And it is required that the traffic from VLAN 100 should be transmitted in VLAN 1050, while the traffic from VLAN 200 should be transmitted in VLAN 1060.